Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json)
Hash identifier: xfqq/GcTw9qRN6Xbf+N19dDDzVjAOZ0J8C0qcFZvaFI=
Subject key identifier: 9D:0D:43:9F:DA:43:78:38:1E:CC:E3:36:09:13:56:E8:ED:D3:29:3A
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Certificate issuer: /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial: 0196B17C5AB7759E5C7177B48921BFF83B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
Manifest number: 1503
Signing time: Thu 08 May 2025 20:00:38 +0000
Manifest this update: Thu 08 May 2025 20:00:38 +0000
Manifest next update: Fri 09 May 2025 20:00:38 +0000
Files and hashes: 1: Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa (hash: yodxfHzeCCrONRmxjgNBHi9TEwJB+PIep9C2GIrnRgo=)
2: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: sPDatRzZbGVvNnhbygWwYCmLgEuFJYEbpRhjTlCKBfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:5a:b7:75:9e:5c:71:77:b4:89:21:bf:f8:3b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944078b40772b172c7046e7446204980ceae139
Validity
Not Before: May 8 20:00:38 2025 GMT
Not After : May 9 20:00:38 2025 GMT
Subject: CN=9d0d439fda4378381ecce336091356e8edd3293a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:75:0a:0b:8f:89:6c:e3:40:b1:e6:5c:68:
07:85:70:53:1b:84:33:e1:93:c8:0d:a4:0d:d3:5f:
1a:13:50:5b:4e:61:25:e9:d8:97:9c:02:8d:83:3b:
46:af:ca:e3:87:b2:d9:c4:24:1c:05:94:41:97:c6:
3d:f9:2e:90:99:93:48:5e:64:09:91:e6:b2:00:fc:
2e:59:e9:8e:8e:97:97:9c:94:4b:ac:1e:61:33:75:
0f:31:e0:1b:67:2a:74:8b:bc:f1:db:74:25:ef:dd:
29:6c:3a:a0:05:9b:36:da:d2:12:09:a2:a5:8b:0b:
c0:09:24:ce:d6:66:1e:38:43:52:09:ff:e0:92:f3:
29:23:c7:ee:57:99:a7:c6:2b:ac:cf:da:6b:6d:9a:
92:3e:02:8f:a9:8d:9a:93:92:1e:e9:98:7d:e7:5b:
7a:11:44:4c:03:bb:59:4f:ef:7c:1f:f4:69:38:b4:
0a:5c:af:9b:3e:36:3f:10:d7:68:bd:c6:39:a7:93:
94:97:5e:5d:06:36:f1:6e:9f:55:07:48:48:62:19:
9c:76:61:e6:77:69:e5:01:84:d4:cc:40:77:28:91:
3d:7d:d5:80:61:29:ad:b9:47:d0:3c:ad:5b:3b:2e:
f6:6d:6b:ca:8c:5f:6d:b6:29:5b:f5:76:46:a6:a3:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0D:43:9F:DA:43:78:38:1E:CC:E3:36:09:13:56:E8:ED:D3:29:3A
X509v3 Authority Key Identifier:
keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8e:5b:1b:c7:e4:a7:5b:23:b7:fe:ee:85:38:c8:ce:c5:26:
59:7c:41:30:aa:63:72:21:dc:e9:b7:41:36:22:53:61:5c:db:
f9:6c:ef:f2:da:5f:74:24:1a:92:e5:00:96:31:b4:f4:8b:ba:
85:3d:14:ee:d4:08:b2:8c:2c:7a:f3:dd:d5:ea:f3:20:48:7d:
78:27:45:71:70:00:9d:d3:fa:80:3d:7c:cb:c0:b4:58:aa:a6:
14:66:ee:14:61:c3:48:a0:07:70:5f:f4:17:e9:b6:da:9b:21:
e8:f5:ea:64:2e:d4:46:48:b6:5c:09:1f:3d:3f:29:1e:ff:82:
45:cb:f8:79:4e:dd:ff:7a:6e:63:74:9a:5e:c8:dc:a7:70:e1:
cd:d1:b6:80:c0:32:99:76:00:85:72:cb:6f:f9:9e:5e:c4:82:
fd:3e:81:b0:a0:2f:5a:cf:29:20:24:af:80:69:f6:4c:f5:41:
d5:ca:c5:1d:d9:62:ec:96:ee:d7:8a:8f:80:c2:5a:38:42:5f:
1d:0b:cc:9b:9c:c0:48:39:67:9d:fa:f1:66:ca:80:cc:9a:9b:
81:da:89:bd:69:69:c3:5d:ff:4c:aa:8f:ce:b3:87:98:1e:65:
ed:59:a0:b3:d1:9c:4b:94:ab:99:eb:df:d0:e8:b9:dc:c7:b7:
a4:72:c5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:49:24 2025 by rpki-client